Adobe has released emergency patches for CVE-2026-48449, a critical remote code execution (RCE) vulnerability in Campaign Classic with a maximum CVSS score of 10.0. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable systems without user interaction. Organizations runni
Threat actors successfully compromised Adform’s advertising script infrastructure, injecting malicious code that swaps cryptocurrency wallet addresses on customer websites. The supply chain attack affected numerous publishers and e-commerce platforms globally, redirecting legitimate cryptocurrency t
Adobe has disclosed a critical remote code execution (RCE) vulnerability in Adobe Campaign Classic, assigned a maximum CVSS score of 10.0. Tracked as CVE-2024-36204, this pre-authentication flaw allows attackers to execute arbitrary code without any user interaction. All organizations running affect
Arch Linux has temporarily suspended the Arch User Repository (AUR) package adoption feature after attackers exploited the process to inject malicious code into orphaned packages. Multiple threat actors systematically adopted abandoned packages and pushed compromised commits, putting thousands of us
South Korean cybersecurity authorities have issued urgent warnings about an ongoing state-backed watering hole attack campaign targeting domestic organizations. The sophisticated operation involves compromising legitimate websites frequently visited by government officials, defense contractors, and
A threat actor has successfully weaponized DeepSeek AI to conduct autonomous cyberattacks against vulnerable servers, marking a significant escalation in AI-driven offensive operations. The attacker leveraged the AI model’s reasoning capabilities to automatically identify, exploit, and compromise se
Wordfence security researchers discovered a critical backdoor vulnerability in the Advanced Responsive Video Embedder (ARVE) WordPress plugin, affecting thousands of websites. The backdoor allowed unauthorized administrative access to vulnerable WordPress installations, posing an existential threat
XRP cryptocurrency faces heightened security risks as volatility attracts sophisticated phishing campaigns and automated attack vectors targeting crypto exchanges and individual traders. Threat actors are exploiting market uncertainty through social engineering tactics, fake trading platforms, and c
Device Code Phishing has emerged as the fastest-growing authentication attack vector in 2026, exploiting OAuth 2.0’s device authorization flow to bypass MFA and gain persistent access to cloud environments. This technique tricks users into authenticating malicious applications through legitimate Mic
The PHP development team has released security patches addressing three critical vulnerabilities affecting multiple PHP versions. These flaws enable SQL injection attacks through PDO parameter handling (CVE-2024-8932), memory corruption via XML processing (CVE-2024-8925), and server crashes through